Security
Google CASA Tier 2
Section titled “Google CASA Tier 2”ctxd has passed the Google Cloud Application Security Assessment (CASA) Tier 2. This is an independent third-party security audit required by Google for apps that access restricted user data scopes.
Data handling
Section titled “Data handling”- Encryption in transit: TLS 1.2+ for all connections
- Encryption at rest: Server-side indexed data is encrypted
- Per-user isolation: Every query is scoped to the authenticated user. No cross-tenant access
- OAuth2 scoped tokens: ctxd only accesses what the user explicitly grants
- Data deletion: User data is deletable on request. Account deletion triggers a 30-day soft deletion period, after which all data is permanently purged
What ctxd stores
Section titled “What ctxd stores”ctxd indexes the content of your files for search. It stores:
- Parsed text extracted from your documents
- Embeddings for search ranking
- Metadata (titles, timestamps, file paths, app source)
Your original files stay in their source apps. They are never copied or moved.
What ctxd does not store
Section titled “What ctxd does not store”- Raw original files
- OAuth tokens in plain text
- User passwords (OAuth only, no password auth)
Per-user isolation
Section titled “Per-user isolation”Every API call is authenticated. Every search query is scoped to the authenticated user’s data. There is no way to query another user’s files.
On-prem deployment
Section titled “On-prem deployment”Available for organizations with strict data residency requirements. Contact us for details.
SOC 2 Type II
Section titled “SOC 2 Type II”On the roadmap.
Compliance
Section titled “Compliance”- GDPR-compliant data handling practices
- Data processing limited to what’s disclosed in the Privacy Policy
- User data never sold to third parties